Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF933CC6AEA911F1917BB90CCF1D38B0.roa
File:                     AF933CC6AEA911F1917BB90CCF1D38B0.roa (raw, json)
Hash identifier:          Eo6nDcq++pjvbLbUaX3LEzz/dVyfRczqZlH2snGjAKM=
Subject key identifier:   9B:93:C2:A9:4B:5D:99:EF:37:A3:79:AE:1E:31:AA:33:39:22:67:9F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF933CC6AEA911F1917BB90CCF1D38B0.roa
Signing time:             Sat 12 Sep 2026 12:58:45 +0000
ROA not before:           Sat 12 Sep 2026 12:58:40 +0000
ROA not after:            Tue 22 Sep 2026 12:58:40 +0000
asID:                     18013
IP address blocks:        154.204.8.0/21 maxlen: 24
                          154.204.128.0/18 maxlen: 24
                          154.204.183.0/24 maxlen: 24
                          154.210.2.0/24 maxlen: 24
                          154.211.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 21 Sep 2026 18:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124888 (0x1e7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 12:58:40 2026 GMT
            Not After : Sep 22 12:58:40 2026 GMT
        Subject: CN=6aa54c85-d8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9e:ba:30:fc:a7:7c:9a:51:73:d6:ce:8e:7a:
                    be:d1:8f:ad:3a:a1:ac:9e:11:e3:d1:b8:75:f8:6e:
                    6f:14:af:78:de:68:27:10:cd:58:66:29:05:f9:cf:
                    63:f0:15:24:7d:58:12:31:5b:7a:22:56:77:89:72:
                    5c:7f:a9:58:54:f9:c0:a4:94:ce:02:97:a2:a6:59:
                    81:ea:a0:7a:dc:cc:64:2e:91:2c:dd:99:5a:1a:25:
                    a4:66:64:75:cd:50:da:08:14:32:e0:55:9f:2c:ce:
                    b8:1c:ed:26:eb:28:1a:50:41:16:e5:24:a3:58:a3:
                    32:fa:bd:d6:25:15:26:22:21:4f:d4:6d:d1:30:95:
                    d2:a1:ba:80:ac:f4:2f:27:55:38:05:52:d4:f9:6a:
                    7d:bb:0f:f5:70:10:1b:3e:26:0d:6d:4c:4f:8a:3c:
                    9c:b9:73:c1:56:ab:cc:d0:bf:34:73:e9:c6:23:03:
                    57:51:c5:da:35:a8:5d:1a:29:24:87:39:62:51:c4:
                    ed:ef:5f:c4:b1:14:3c:a9:ff:17:71:85:cc:e2:af:
                    8a:74:77:b3:91:e3:ed:89:52:63:3a:b0:ff:04:f4:
                    f0:52:97:a5:be:d0:13:a3:34:b0:ab:21:b6:e5:48:
                    02:ed:23:80:9b:a6:15:5f:19:df:9a:b6:6b:91:0e:
                    8b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:93:C2:A9:4B:5D:99:EF:37:A3:79:AE:1E:31:AA:33:39:22:67:9F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF933CC6AEA911F1917BB90CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.8.0/21
                  154.204.128.0/18
                  154.210.2.0/24
                  154.211.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:3f:d3:21:d3:ad:cd:28:23:c4:bd:f0:3e:fe:4f:ef:62:43:
         f9:07:85:ca:5f:c6:d6:36:a3:e7:87:8a:5a:b9:48:3b:5d:ac:
         40:5d:4c:22:67:7e:7f:6a:27:c5:69:f8:64:59:eb:2e:bb:17:
         e7:a7:35:68:84:68:81:76:5f:3a:45:cb:51:67:b2:e9:00:2e:
         d2:2f:e8:a8:5b:bb:7a:60:24:18:ab:f9:2f:b9:53:eb:89:ef:
         57:1b:45:b8:06:b6:ae:29:ee:b3:d4:ae:24:66:3d:66:d7:d5:
         96:3e:5d:41:e6:e2:ff:81:23:84:25:f7:e3:34:33:c4:5e:28:
         30:9b:04:09:f2:d6:b9:1a:f9:03:15:62:ea:e7:7f:92:9b:89:
         f7:85:08:38:3c:f8:02:56:65:80:c9:4e:70:f0:f1:a9:0f:c8:
         2c:a8:c4:57:62:55:ff:ae:c1:07:64:cd:03:5b:66:1a:ce:cc:
         1e:a7:7a:42:61:f8:3b:b2:87:ad:a8:a0:4b:44:a1:65:29:6b:
         51:44:67:19:4f:c3:01:90:5d:8b:9b:6d:96:01:c9:03:1b:44:
         df:06:97:70:7f:87:08:0d:52:36:69:7a:1e:e2:ae:7d:8f:ba:
         21:c0:0f:d9:27:9a:76:a6:82:e4:20:ed:14:c6:46:c3:67:50:
         33:83:4a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----